Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
File: r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft (raw, json)
Hash identifier: wMUCbxPqf78yV1+KA5CSHaLSkkM17XzEQuPb8ots8yg=
Subject key identifier: A5:11:EE:55:55:1F:7E:6C:5B:EC:2D:95:67:E4:23:E6:CA:8E:57:03
Authority key identifier: AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
Certificate issuer: /CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Certificate serial: 019D29CE10D3A0373A27E931D4F07891B0B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 11:01:03 +0000
Manifest this update: Thu 26 Mar 2026 11:01:03 +0000
Manifest next update: Fri 27 Mar 2026 11:01:03 +0000
Files and hashes: 1: r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl (hash: W+kSiQ6D9kcwQ2aa+LcFtzf/mjjGXFVG+kJDpTfqOhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:10:d3:a0:37:3a:27:e9:31:d4:f0:78:91:b0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Validity
Not Before: Mar 26 11:01:03 2026 GMT
Not After : Mar 27 11:01:03 2026 GMT
Subject: CN=a511ee55551f7e6c5bec2d9567e423e6ca8e5703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:25:2e:af:89:62:c7:c7:d4:6f:a8:20:21:
ad:75:93:7a:9d:d6:b5:1f:90:a9:a5:55:28:23:66:
78:0a:6e:9a:7c:3c:11:ed:60:d8:3c:6b:62:6d:25:
29:c7:86:00:68:30:08:03:d5:79:42:9a:5a:6f:4b:
5a:ef:ee:2d:6a:3e:86:dd:5f:2e:6e:b5:62:84:ac:
79:00:5a:01:4e:8e:32:2c:83:2a:39:5a:0a:5d:51:
90:97:17:06:08:6f:03:3c:7b:c3:b2:24:a6:dd:b2:
45:26:0d:21:22:3b:94:cc:c1:b3:ab:08:15:26:82:
b5:07:82:98:e0:f3:09:83:c3:85:ca:33:7a:c5:db:
d4:6f:03:d9:ee:fc:d5:3a:b1:0e:e0:a8:1b:cf:1d:
71:72:a9:34:dd:f3:33:d6:18:5c:90:0f:4f:aa:17:
cb:92:f7:6d:c6:89:b3:bd:40:7f:bd:ad:70:1e:d0:
c4:8a:32:9d:90:69:4a:1a:69:e3:cb:97:b8:2f:0c:
59:c6:13:9f:0d:bb:ca:79:a4:64:cd:27:eb:0b:29:
9d:34:cd:99:db:3f:e7:69:39:dd:ba:db:23:2f:cf:
b3:6c:73:11:4c:07:98:ec:ec:f3:c7:cd:57:2e:3e:
01:ea:b5:57:0a:39:07:21:60:17:fd:80:4c:f5:46:
e5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:11:EE:55:55:1F:7E:6C:5B:EC:2D:95:67:E4:23:E6:CA:8E:57:03
X509v3 Authority Key Identifier:
keyid:AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d7:f2:b6:df:7e:14:b0:3f:e4:d3:4b:a9:4e:a0:ed:c8:b6:
b2:b0:64:da:17:4a:cd:d6:08:aa:db:f1:bf:3b:0f:de:58:da:
c4:5d:b5:28:c8:a9:fe:85:b9:a2:8f:c4:65:65:50:46:76:45:
93:71:a8:10:a7:02:5a:f3:7e:fd:0e:3d:a2:ca:6a:b0:be:ef:
21:94:f2:ec:4a:84:9b:52:93:db:38:a8:b3:f6:d6:f2:a4:24:
fa:1b:7f:6d:80:2e:71:4e:e7:f3:5a:18:2a:db:74:e0:bd:97:
cd:30:1e:16:11:85:7d:e1:33:b7:d9:eb:8d:c0:b6:63:02:38:
5a:d9:7c:d1:dd:02:d3:56:a0:02:d1:01:8e:f1:e4:63:ed:54:
d2:e9:4b:d9:5b:c4:ae:4e:ce:6b:e9:08:34:4b:5e:cd:56:82:
17:d6:94:c3:12:91:bd:b4:b3:33:f3:b4:31:3e:4d:4e:c9:bc:
56:72:3a:67:ec:1e:72:e4:8e:df:b9:48:e2:57:7b:21:ff:77:
90:b7:3c:ea:3c:00:a7:ef:f0:83:3b:cf:7e:0e:e1:a1:31:91:
bd:2a:5d:29:5f:dd:dd:4b:c7:8c:db:43:35:43:33:85:d3:91:
a9:a3:3a:d9:19:25:3c:4d:1a:a3:88:0a:7d:84:81:49:f3:a6:
4a:f0:5c:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzhDToDc6J+kx1PB4kbCzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjM1OTY1NDZkNDYyMGIwMmE5NjQyZjA4Yjc3Y2ZlNjUw
MmFlOTkwHhcNMjYwMzI2MTEwMTAzWhcNMjYwMzI3MTEwMTAzWjAzMTEwLwYDVQQD
EyhhNTExZWU1NTU1MWY3ZTZjNWJlYzJkOTU2N2U0MjNlNmNhOGU1NzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwAlLq+JYsfH1G+oICGtdZN6nda1
H5CppVUoI2Z4Cm6afDwR7WDYPGtibSUpx4YAaDAIA9V5Qppab0ta7+4taj6G3V8u
brVihKx5AFoBTo4yLIMqOVoKXVGQlxcGCG8DPHvDsiSm3bJFJg0hIjuUzMGzqwgV
JoK1B4KY4PMJg8OFyjN6xdvUbwPZ7vzVOrEO4Kgbzx1xcqk03fMz1hhckA9PqhfL
kvdtxomzvUB/va1wHtDEijKdkGlKGmnjy5e4LwxZxhOfDbvKeaRkzSfrCymdNM2Z
2z/naTndutsjL8+zbHMRTAeY7Ozzx81XLj4B6rVXCjkHIWAX/YBM9UblAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUR7lVVH35sW+wtlWfkI+bKjlcDMB8GA1UdIwQY
MBaAFK/zWWVG1GILAqlkLwi3fP5lAq6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9OWlpVYlVZZ3NDcVdRdkNMZDhfbVVDcnBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wMjk5ZjQtZDAwZC00NTdjLWJiNjct
MmFiOWFmOTM4NDM0LzEvcl9OWlpVYlVZZ3NDcVdRdkNMZDhfbVVDcnBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8wMjk5ZjQtZDAwZC00NTdjLWJiNjctMmFiOWFmOTM4NDM0
LzEvcl9OWlpVYlVZZ3NDcVdRdkNMZDhfbVVDcnBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUtfytt9+
FLA/5NNLqU6g7ci2srBk2hdKzdYIqtvxvzsP3ljaxF21KMip/oW5oo/EZWVQRnZF
k3GoEKcCWvN+/Q49ospqsL7vIZTy7EqEm1KT2zios/bW8qQk+ht/bYAucU7n81oY
Ktt04L2XzTAeFhGFfeEzt9nrjcC2YwI4Wtl80d0C01agAtEBjvHkY+1U0ulL2VvE
rk7Oa+kINEtezVaCF9aUwxKRvbSzM/O0MT5NTsm8VnI6Z+wecuSO37lI4ld7If93
kLc86jwAp+/wgzvPfg7hoTGRvSpdKV/d3UvHjNtDNUMzhdORqaM62RklPE0ao4gK
fYSBSfOmSvBc0A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:05:43 2026 by rpki-client